Post #4164958

@teledyn@mstdn.ca Worth seeing what's actually matching before you whitelist the LAN: sudo fail2ban-regex /var/log/jellyfin/log_*.log /etc/fail2ban/filter.d/jellyfin.conf --print-all-matched The jail in Jellyfin's own docs is maxretry=3 with findtime=43200. Three denied auths in twelve hours. That's not a brute-forcer, that's a house: one client sitting on a stale token, and the third strike lands mid-film. I'd shrink findtime long before touching the whitelist.